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(FILE 'USPAT' ENTERED AT 09:13:36 ON 18 DEC 1997) 

LI 25 S (MACRO# AND (VIRUS? OR SCAN? OR INFECT?) )/AB 

L2 398 S (TEST? OR SCAN? OR DIAGNOS? OR ANALY? OR DEBUG?) (5A) M 
ACR 

L3 90 S L2 AND 395/CLAS 

L4 22 S L3 AND 395/l83####/CCLS 

L5 1688 S (LOCAT? OR DETECT? OR SCAN?) (5A) (VIRUS?) 

L6 38 S L5 AND 395/CLAS 

L7 20 S L6 AND SIGNATURE# 

L8 25 S L6 AND SCAN? 

L9 16 S L8 AND L7 

LIO 744 S (TEST? OR DEBUG? OR SCAN? OR DIAGNOS? OR VIRUS? OR INFEC 
T?) 

Lll 25 S LIO AND TEMPLATE (2A) (FILE#) 

L12 0 S Lll AND VIRUS? 

L13 3 S Lll AND 395/CLAS 

L14 68123 S .DOT 

L15 94 S L14 AND LIO 

L16 9 S L15 AND 395/CLAS 

L17 249 S L5 AND L14 

L18 0 S L17 AND 395/CLAS 
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ABSTRACTED-PUB-NO :EP 638184B 

BASIC-ABSTRACT: The data processing system includes a number of computers (2) 
interconnect ed through a local network (1) and also to a network adapter 

(7) . The network adapter has a computer (8) connected to it. This computer 
can monitor all the traffic on the network. The computer monitors file 
packets transmitted and can reassemble substantially all files on the 
network. The recreated files can be scanned for virus infection. If a 
virus is found, a vaccine program can be transmitted to the transmitter and 
receiver of the infected files. Further a neural network can monitor 
traffic patterns and raise a warning if these alter substantially. 
ADVANTAGE - Detects virus infection on local network, eg ring network 
earlier and reduces down-time for repair of system. 

ABSTRACTED-PUB-NO:US 5511163A 

EQUIVALENT-ABSTRACT: The data processing system includes a number of 
computers (2) interconnect ed through a local network (1) and also to a 
network adapter (7) . The network adapter has a computer (8) connected to 
it. This computer can monitor all the traffic on the network. The computer 
monitors file packets transmitted and can reassemble substantially all files 
on the network. The recreated files can be scanned for virus infection. If 
a virus is found, a vaccine program can be transmitted to the transmitter 
and receiver of the infected files. Further a neural network can monitor 
^'traffic patterns and raise a warning if these alter substantially. 
ADVANTAGE - Detects virus infection on local network, eg ring network 
earlier and redv*'^^*^ down-time for repair of system. A data processing 
system comprising ... / "'ral.-i *- v of computers interconnecte d through a local 
network in the form of '-work, said network being connected to a 

network adaptor which is able to 1 * /' information on the network, 

characterized in that the network adaptor k . , Ir connected to a computer 

(8) , which together with the adaptor (7) can perform an assembling and 
scanning of substantially all files on the network (1) and carry out a 
recognition of virus signatures, if any, in the files, the computer (8) 
being adapted to provide information on the place of origin of infected 
data, if any, as well as on the position to which said infected data has 
been transmitted, and comprising a neural network having program means for 
recognizing the usual interchange of data on the local network (1) and for 
activating an alarm if an unusual interchange of data resembling a virus, 
such as an unknown virus signature, is recognized. 
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